6.9.1.4.3 Security Techniques for PGQL Queries

Programs executing dynamic queries might be subject to injection attacks that could compromise integrity and functioning of the applications.

This topic presents some techniques that can be used to prevent injection attacks when building PGQL queries using string concatenation.

• Using Bind Variables in PGQL Queries
  
• Verifying PGQL Identifiers